CVE-2001-1174

The CVE-2001-1174 issue affects the Elm email client (Elm 2.5.5 and earlier). The root cause is a buffer overflow when handling very long Message-ID headers, allowing remote attackers to potentially execute arbitrary code. Mandrake/MKSA advisory MDKSA-2001:067 notes that the overflow could overwr...

CVE-2001-1175

CVE-2001-1175 : In vipw from the util-linux package, before version 2.10, editing /etc/shadow could leave the file world-readable in some cases, enabling local users to more easily perform brute-force password guessing. Supported details in connected docs show Red Hat advisories (RHSA-2001:95, 13...

CVE-2001-0727

Summary of CVE-2001-0727 (File Execution Vulnerability) : Internet Explorer 6.0 on Windows is affected by a vulnerability in MIME header handling (Content-Disposition and Content-Type). An attacker can cause code execution by modifying headers to disguise downloaded content as safe, potentially t...

CVE-2001-0981

CVE-2001-0981 affects HP CIFS/9000 Server (SAMBA) versions A.01.07 and earlier. With the 'unix password sync' option enabled, the server calls passwd without the requesting username, which could cause the password of a different user to be changed. Impact: potential unauthorized password changes....

CVE-2001-0869

CVE-2001-0869 is a format-string vulnerability in the Cyrus SASL library (cyrus-sasl) affecting the default logging callback _sasl_syslog in common.c. The Mandrake MDKSA-2002:018 advisory notes a format bug in cyrus-sasl that could allow a remote attacker to obtain access or elevate privileges, w...

CVE-2001-1100

CVE-2001-1100 affects W3Mail 1.0.2 (and possibly other CGI programs). The issue allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the ‘Compose Message’ page. This is a remote command execution vulnerability with network scope and low complexity, but no...

CVE-2001-0900

The CVE-2001-0900 entry describes a directory traversal in Gallery’s modules.php (Gallery

CVE-2001-0912

Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges...

CVE-2001-0889

Exim vulnerable to remote command execution when redirecting to a pipe: Exim 3.22 and earlier fail to properly verify the local part of the address, allowing shell metacharacters to run arbitrary commands. Public details from CVE-2001-0889 describe impact as remote command execution with the Exim...

CVE-2001-0797

CVE-2001-0797 is a buffer overflow in the System V–derived /bin/login (affecting login/telnetd implementations such as TTYPROMPT) triggered by a large number of arguments, enabling remote arbitrary-command execution. The vulnerability affects various System V based OSes and can be exploited via s...

CVE-2001-1096

CVE-2001-1096 refers to buffer overflows in muxatmd on AIX 4. The vulnerability arises from a buffer overflow condition in muxatmd, which could cause a core dump and potentially allow code execution. The security notes indicate the vulnerability is associated with AIX 4, but no explicit exploit d...

CVE-2001-0946

The vulnerability CVE-2001-0946 affects Red Hat 7.2 (Enigma) via apmd/apmscript, where a local attacker can craft a symlink to the LOW_POWER temporary file to create or modify the modification times of arbitrary files. This could be used to trigger a denial of service, for example by creating /et...

CVE-2001-1027

The CVE-2001-1027 entry describes a buffer overflow in the WindowMaker (wmaker) window title handling code, affecting at least 0.64 and earlier. Exploitation could occur remotely by sending a long window title, enabling arbitrary code execution. OpenVAS/Debian Mandrake advisories confirm remote i...

CVE-2001-1089

libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request...

CVE-2001-1030

CVE-2001-1030 affects the Squid proxy server when used in HTTP accelerator mode. The vulnerability exists if httpd_accel_host and http_accel_with_proxy are off, enabling an attacker to bypass ACLs and perform unauthorized activities such as port scanning. Concrete details from connected sources i...

CVE-2001-0887

CVE-2001-0887 affects xSANE 0.81 and earlier. The vulnerability allows local users to modify files of other xSANE users via a symlink attack on temporary files. The provided documents describe the issue but do not specify a remediation or fixed version; exploitation details are not included.

CVE-2001-0961

CVE-2001-0961 describes a buffer overflow in the tab expansion routine of the most pager. The vulnerability lets local or remote attackers execute arbitrary code by viewing a malicious file with most. Debian’s DSA-076-1 and related scans (OpenVAS/Nessus) confirm the issue affecting the most packa...

CVE-2001-0550

CVE-2001-0550 affects wu-ftpd 2.6.1, where the ftpglob (glob) handling of a ~{ argument in commands like CWD can lead to remote command execution. The vulnerability is documented as a remote code execution flaw in the ftpglob implementation, allowing an attacker to run arbitrary commands on the a...

CVE-2001-1177

CVE-2001-1177 affects the Samsung ML-85G GDI printer driver prior to version 0.2.0. The vulnerability arises from a symlink attack on temporary files, allowing a local attacker to overwrite arbitrary files. The impact is described as a local/privilege-bypass style risk with complete confidentiali...

CVE-2001-1074

Summary: CVE-2001-1074 affects Webmin 0.84 and earlier. The vulnerability arises because Webmin does not properly clear the HTTP_AUTHORIZATION environment variable when the web server restarts, causing authentication information to be exposed to all CGI programs and enabling local privilege escal...